Beveiligingsadvies

CVE-2003-0124

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2004-09-01 04:00:00

Laatst bijgewerkt 2024-08-08 01:43:35

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man.

← Alle CVE's bekijken Bekijk op cve.org ↗